
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier: hiGEuyOaay0ZBMXW5DChfLQk/NaWAv3BqGWmr5mMIjc=
Subject key identifier: 0F:85:FC:0E:54:87:0F:F7:B9:86:FA:A7:DF:84:E2:BF:5C:EE:58:46
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 03D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number: 03BE
Signing time: Mon 21 Sep 2026 00:25:51 +0000
Manifest this update: Mon 21 Sep 2026 00:25:51 +0000
Manifest next update: Mon 28 Sep 2026 00:25:51 +0000
Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: gUqVb4bjyoqTmEAE/AvwPmBGPj0DEIys+FvU/Qwsnj8=)
2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: QouBh/SopzzJHOsamAAlSJS8qKQU7cprqb1IggD1INw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Sep 21 00:25:51 2026 GMT
Not After : Sep 28 00:25:51 2026 GMT
Subject: CN=6ab0798f-b2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:e1:04:2e:0e:1f:72:24:c5:c9:ff:6c:74:
9d:da:e1:16:4b:94:74:b8:f9:70:81:ae:35:1c:0c:
e2:8c:06:c4:9e:b7:b3:c8:cd:1d:c8:d5:7b:14:a6:
50:2b:8c:b5:1c:b1:5b:bc:f9:ca:29:42:18:15:2d:
c1:9d:e6:96:a6:39:37:f0:97:6c:6f:e1:f6:8c:3b:
e6:e0:fc:f5:b1:aa:29:6a:96:27:79:7b:75:60:d4:
a3:3c:16:52:51:cc:53:34:2c:40:9e:0f:95:71:12:
07:fd:04:52:43:b4:a4:d7:99:8a:99:80:69:b4:61:
89:07:04:59:c8:4d:c6:b3:8b:a5:c3:95:a6:6d:97:
67:19:6a:33:d5:c1:ea:9f:ba:34:72:7c:d2:5b:de:
83:d0:20:ca:51:ed:1f:78:bb:97:b8:cf:c0:70:bf:
d3:c3:4d:24:86:9a:97:00:0e:60:e0:f9:d1:6a:4f:
7b:c4:74:29:58:99:cd:82:d0:97:43:5a:53:55:50:
13:5e:69:2c:1c:ae:c5:80:8c:d1:fd:2c:b4:9d:79:
78:42:c4:32:94:8d:62:d8:ec:d3:b0:8d:ac:3e:b3:
f1:dc:4d:b0:1e:7f:f3:72:11:38:d5:da:23:2b:c5:
5a:9d:25:22:f0:fa:56:90:df:03:57:9d:74:b9:c7:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:FC:0E:54:87:0F:F7:B9:86:FA:A7:DF:84:E2:BF:5C:EE:58:46
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:8f:35:7e:8d:4c:c4:d6:03:31:45:ee:89:d5:38:97:bc:25:
01:cd:b8:4c:a6:94:58:db:df:3d:27:e5:59:3d:dc:32:4e:6a:
6d:a8:98:8c:b3:da:c3:92:50:a0:dd:31:99:53:57:e2:a7:b0:
53:a4:29:3c:57:67:80:ac:6f:a8:86:c5:b2:8a:68:89:cc:c5:
4b:01:c6:5f:4c:9f:ed:9a:77:a0:d1:16:7c:4c:c4:30:7a:89:
17:8e:54:f9:e7:6c:5f:ab:d6:13:f1:8b:d6:40:19:94:52:78:
1d:ac:89:b5:da:03:e9:58:05:2d:9e:90:31:db:d3:95:59:96:
cf:50:04:4b:3c:6a:91:21:d5:2d:b5:95:80:ab:74:b7:29:ad:
e3:61:fd:a5:d4:5b:0c:7b:d5:5b:2a:1e:af:b7:71:52:8d:e1:
2e:75:3e:ce:cd:2a:fc:cd:11:1a:97:0c:9e:2c:c1:b1:8f:16:
34:b8:0a:1a:17:f8:7d:a1:25:0e:9b:5e:93:03:87:67:6a:d4:
bd:98:14:04:ab:71:62:9c:e7:6d:21:84:35:9b:72:b0:90:66:
19:36:05:34:c8:2b:1d:a6:a9:b6:f1:6c:48:d9:09:fe:70:f0:
c9:09:13:54:f3:f8:cc:07:c7:8c:95:75:a6:83:2d:0f:96:28:
17:39:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:29:02 2026 by rpki-client